Server software · checked November 15, 2026

Is Plesk ready for 100-day and 47-day certificates?

Renews automatically

Plesk’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

• SSL It! automatically renews free certificates from Let's Encrypt and DigiCert 30 days before they expire.[Plesk]

What doesn’t

• SSL It! can't automatically renew paid certificates. You reissue them through the Plesk Online Store or your provider.[Plesk]
• Optional: "Keep websites secured" replaces an expired paid certificate with a free Let's Encrypt one, usually within an hour after it expires. Visitors may see a warning in between.[Plesk]

When it renews

30 days before expiry for free Let's Encrypt and DigiCert certificates.[Plesk]

What to do, and by when

1. March 15, 2027 · In 120 days
   Maximum certificate lifetime drops to 100 days[CA/Browser Forum 1 (CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026)), 2 (CA/Browser Forum — Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods)]
   Move paid certificates to free automatic ones before your first renewal after this date, unless you need OV/EV.

Steps

1. In Plesk, go to Websites & Domains > SSL/TLS Certificates (SSL It!) for each site.
2. Prefer a free Let's Encrypt certificate unless you need OV/EV. SSL It! renews it 30 days before expiry.
3. If you keep a paid certificate, note its expiry. SSL It! won't renew it.